Forensic Hardware: duplicators which can image without removing hard drive
What's up there Taney? Use any flavor or Linux boot disk, or boot to a USB thumb drive with an imagine program on. All you'll need is to look up "forensic boot disk" and pick the one you feel most...
View ArticleForensic Software: Time Stamp Mystery
Xennith wrote: I'm not sure if anyone has pointed out that as well as the normal timezone issues its possible that the clock could be wrong. That implication was here Quote:: Was the system clock...
View ArticleGeneral Discussion: RegRipper v2.8 available
TuckerHST wrote: randomaccess wrote: how come you aren't able to get a VM working? have you checked out the tutorials on justaskweg.com; I've found them incredibly helpful Thanks for the tip on VM...
View ArticleClassifieds: CellExtract
I have a Logicube CellExtract for sale with 2yrs service contract, one year left on the service contract. Comes complete with cables, cases etc, barely used over the last year. Asking $1500.00 obo...
View ArticleEducation and Training: LinkedIn Forensic Toolset - Beta Testers
Good afternoon, Would you like to join the beta team and test new features for a forensic toolkit designed for social media investigations? This is an excellent way to learn about online digital...
View ArticleForensic Hardware: Forensic Bridge Reccomendations
i like Wiebetech Combobox 5 better than tableaus. provantage has the best prices i have found
View ArticleGeneral Discussion: Recovered Lotus Notes nsf files can not be opened
Hi all Is there anybody who know how to fix the problem:I've used the Encase 7 to carve out a lot IBM Lotus Notes nsf files(in the unallocated space) but none of them can be opened,I'm sure there are...
View ArticleForensic Hardware: duplicators which can image without removing hard drive
taneryldz wrote: Hi, i am a technician at a forensic firm. İ am a newbie in this area so look with favor on my ignorance.Are there any duplicator or tool that can manage this work. If not, can you...
View ArticleGeneral Discussion: Mac Serial Number from DMG image
One method: 1. Get another MacBook, preferably with the same OS 2. Note serial number 3. Search for serial number; make sure you include hidden/system files 4. If you find it, note the location! But...
View ArticleGeneral Discussion: NAND flash disk ECC
rs8191 wrote: Yes, that is correct, there two NAND Flash with the same controlline(Chipselect;WR;RE;D0-D7 CHIP0; D8-D15 chip1). Therefore that is read and write twice as quickly if the CPU must address...
View ArticleForensic Software: The X-Ways Forensics Practitioner's Guide
The book is done and pre-order ready, fyi. https://xwaysforensics.wordpress.com/
View ArticleGeneral Discussion: Looking for program/script to carve out dates from a file
FYI Craig from Digital Detective was kind enough to reply to my email with the following: 2013/05/08 Quote:: Hi I am sorry, that tool is no longer available. Unfortunately, the tool was written in an...
View ArticleMobile Phone Forensics: IOS physical acquisition
Is there a comparison sheet between UFED versions?
View ArticleForensic Software: Time Stamp Mystery
Anyone else getting PM's asking the same question?
View ArticleGeneral Discussion: RegRipper v2.8 available
DennisMcr wrote: I think it says "password not required" when one is required on a Windows 7 Home Premium, Version 6.1, SP1 machine. This applied to 2 user accounts on the same computer. My reasons for...
View ArticleForensic Software: Time Stamp Mystery
PaulSanderson wrote: I am not sure if anyone has mentioned that the accuracy of the BIOS clock now/when it was seized does not necessarily mean that the clock was right at the time of the search. Even...
View ArticleMobile Phone Forensics: Nokia Symbian 3 date and time database format
The penny has dropped!!! Thanks for help Jaclaz Neil
View ArticleGeneral Discussion: NAND flash disk ECC
So there are 2 chips per 4 GB (totally 8GB of capacity) The subdivision per 2x2GB is due to the fact that it is not easy in standard C programming editing files greater then 2 GB. It is possible...
View ArticleDigital Forensics Job Vacancies: eDiscovery Consultant - London - £35k - £55k...
Our client, a global but boutique consultancy, are seeking an eDiscovery Solutions Consultant to join their rapidly expanding Forensic and Litigation team in London. As an eDiscovery Consultant, you...
View ArticleGeneral Discussion: Recovered Lotus Notes nsf files can not be opened
NSF files are typically large. This means the chance of being fragmented is also very high. Data carving will not recover fragmented files that work. If the NSF files are for e-mails, these tend to...
View Article